Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/e7f89197-feb9-305b-8ff3-b130f29ecf5a.roa
File:                     e7f89197-feb9-305b-8ff3-b130f29ecf5a.roa (raw, json)
Hash identifier:          W3T0PDs55IM8TMxwaLMaNmYsSYiz9dOIuUuICRxEJjk=
Subject key identifier:   E0:21:28:F2:35:58:50:F3:77:CD:E1:B3:DB:F8:48:AE:45:8C:86:4A
Certificate issuer:       /CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60
Certificate serial:       010D0C9F4328584E4824921414E2595E51E5C780
Authority key identifier: BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/e7f89197-feb9-305b-8ff3-b130f29ecf5a.roa
Signing time:             Wed 24 Jun 2026 21:00:12 +0000
ROA not before:           Wed 24 Jun 2026 21:00:12 +0000
ROA not after:            Tue 22 Sep 2026 21:00:12 +0000
asID:                     16696
IP address blocks:        216.247.253.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:48:24:92:14:14:e2:59:5e:51:e5:c7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60
        Validity
            Not Before: Jun 24 21:00:12 2026 GMT
            Not After : Sep 22 21:00:12 2026 GMT
        Subject: CN=7274549d-b795-4ea9-95ec-b63fd26a00c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:e6:7e:3a:08:15:08:c1:eb:c1:8a:b9:60:c3:
                    93:7e:08:03:7c:20:e3:f9:68:c6:83:31:35:05:11:
                    b8:23:68:37:e6:b5:cb:99:c6:7d:9a:08:05:20:a0:
                    d1:71:e5:c8:29:1b:ab:6d:4c:5b:29:da:5a:5f:42:
                    9a:1b:69:ce:f5:a2:78:bb:93:58:22:7f:59:73:00:
                    9a:82:e4:a7:37:5f:f7:83:64:cf:04:44:be:b9:47:
                    71:94:0b:b6:d9:d8:e5:5e:e9:3c:3e:f9:11:ef:5d:
                    2a:f9:0e:59:a7:4e:aa:cf:c7:21:66:0c:80:fa:2f:
                    b4:c7:1f:42:dd:c2:53:67:b8:22:28:7d:e7:37:91:
                    3b:39:66:9c:c1:0a:81:e4:80:50:9b:d7:60:3f:15:
                    0b:bb:2b:79:39:d3:37:1c:d8:ce:de:f8:dd:a3:47:
                    54:8e:6c:c2:f8:13:5f:3b:44:76:5f:00:a7:cb:4e:
                    42:81:35:ef:e6:d0:51:68:6c:98:2b:f6:79:35:e7:
                    4f:db:96:87:cc:d4:bc:b3:1f:83:c9:d0:8f:ac:f7:
                    fe:68:22:fe:2c:52:bb:a8:db:d8:b5:fa:48:24:78:
                    2c:14:ab:84:82:ad:3a:df:df:89:6c:e1:16:25:67:
                    79:e4:9e:d6:b7:8a:f6:4b:26:40:d6:26:6d:fa:27:
                    cc:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:21:28:F2:35:58:50:F3:77:CD:E1:B3:DB:F8:48:AE:45:8C:86:4A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/e7f89197-feb9-305b-8ff3-b130f29ecf5a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.crl

            X509v3 Authority Key Identifier:
                keyid:BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.247.253.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         46:2e:11:cd:36:b4:a1:c7:ee:34:dd:f2:73:06:cd:84:2e:e5:
         ac:2d:66:8d:61:71:a3:04:f9:86:d0:0c:77:c9:47:a0:8c:ce:
         04:4c:90:cf:4c:ef:f5:29:49:ab:fe:e7:a2:45:af:52:aa:41:
         1b:04:51:28:46:8f:30:5a:73:8c:ce:f3:77:28:a1:ff:7d:ee:
         f7:3e:80:74:9d:46:2c:fa:f7:49:28:42:8d:c2:70:98:79:8f:
         6b:b5:f7:49:41:14:68:e6:9a:49:28:22:5d:42:5d:38:7a:56:
         b8:08:93:83:43:ef:9b:44:c8:8a:ee:7b:23:cc:44:00:f6:6d:
         3e:0c:2a:82:57:33:ae:7a:cd:80:3e:d8:b9:33:65:b0:01:70:
         92:60:e8:40:af:52:10:fc:90:2d:29:68:6a:2a:a3:7f:8a:07:
         5f:d4:fe:5e:75:6e:8d:25:96:09:82:7c:cf:46:18:4f:17:29:
         a6:e6:07:79:af:95:38:f6:86:9c:06:c9:7a:ea:9f:17:e1:aa:
         97:f7:53:ba:83:d3:8a:58:64:e0:f6:cd:32:49:9e:2d:8c:53:
         d3:8a:07:13:3a:f5:d8:5b:53:f2:ff:36:49:28:49:05:7c:8d:
         be:37:ad:56:83:ed:6b:4c:3d:3b:71:b2:2b:f2:15:70:2f:5f:
         5e:87:71:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 07:57:28 2026 by rpki-client